Dnsmasq have recently released a new version 2.90. It seems to include a very useful option to block specific query types other than A and AAAA, like TYPE 65 (HTTPS) DNS queries that are known to circumvent the hosts file and the address= option in Dnsmasq. Add --filter-rr option, to filter arbit…

There is already a pull request made, you can add the patch yourself and build with it: dnsmasq: version 2.90 (CVE 2023-50387, CVE 2023-50868) openwrt:main ← nwf:202402-dnsmasq290 opened 01:20PM - 1…

Adding Dnsmasq 2.90

For Developers

egc February 27, 2024, 4:59pm 2

There is already a pull request made, you can add the patch yourself and build with it:

4 Likes

Resolving query[type=65] to local address for iOS clients in dnsmasq